Cyber Security Operations Analyst

Our DoW CSSP operates 24x7x365 to defend the network. This role requires shift work, which means you will likely work nights, weekends, and federal holidays. You must be fully prepared and willing to commit to this schedule.

Schedule: 2200-0600 - Friday to Tuesday . May be requested to work evenings and weekends to meet program and contract needs.
Location: Onsite Ft Belvoir, VA
Clearance requirement: Active DoD Top Secret- must be SCI eligible
Type of Environment: Office
Amount of travel: 10%

The Cyber Security Specialist plays a critical role in protecting DTRA's enterprise network by providing 24/7 cybersecurity monitoring, threat detection, and incident response support. Working alongside Cybersecurity Service Provider (CSSP) analysts, engineers, and agency stakeholders, you will help identify emerging threats, assess risk, investigate security events, and support the defense of mission-critical systems.

This position is ideal for candidates who enjoy threat hunting, cybersecurity operations, incident response, and working in a fast-paced environment focused on protecting national security interests.

Key Responsibilities

Monitor and defend DTRA's network environment through continuous 24x7x365 cybersecurity operations.
Analyze security alerts, investigate suspicious activity, and identify potential threats across enterprise systems.
Collaborate with CSSP analysts, engineers, and internal teams to assess risks, develop mitigations, and respond to security incidents.
Perform threat hunting activities using industry-standard security tools and techniques.
Monitor computer network defense services to ensure the confidentiality, integrity, and availability of DTRA's information systems and infrastructure.
Support compliance with DoD Cybersecurity Service Provider (CSSP) Evaluator Securing Metrics (ESM) requirements.
Conduct research on cyber threats, threat actors, vulnerabilities, and adversary tactics using open-source and government intelligence resources.
Develop detailed technical reports documenting investigations, findings, containment actions, and recommendations.
Provide cybersecurity situational awareness and reporting to leadership and key stakeholders.
Participate in incident escalation, response, and coordination activities within the established CSSP framework.

Qualifications

Experience monitoring and responding to cybersecurity events in a SOC, CSSP, or similar operational environment.
Familiarity with threat hunting, incident response, and security monitoring tools.
Ability to analyze alerts, investigate potential threats, and determine appropriate response actions.
Strong technical writing skills with experience documenting security incidents and findings.
Knowledge of cybersecurity principles, network defense, and threat actor tactics, techniques, and procedures (TTPs).
Strong research and analytical skills.
Ability to work effectively in a collaborative, team-oriented environment.
Willingness to support a 24x7 operational mission, including shift work as required.

Why Join Us?

This role offers the opportunity to directly support a mission-focused cybersecurity program protecting critical government systems. You'll work alongside experienced cybersecurity professionals, leverage advanced security tools, and play a key role in defending against evolving cyber threats.


REQUIRED QUALIFICATIONS
BS 5-7 Years, MS 3-5, PhD 0-2
Experience with cyber security architecture principles that achieve cybersecurity framework goals.
Must have Active DoD Top Secret clearance
IAT Level II certification and CSSP Analyst certification (Security+ CE or better, CEH or better)
Experience with open-source research

DESIRED QUALIFICATIONS
• SANS GCIH or similar certification
• Splunk Search App experience
• Tanium Interact Module experience
• Wireshark experience
• Open-source research experience